Your Mac is Ready for FileVaultFileVault keeps your Mac safe by encrypting your data andprotecting it with the password you use to log in. If youforget your password, you can use your Recovery Key toreset it.  

Hey There! Is there any way to obtain free voucher for Jamf 100 certification?

HI everyone,I am trying to implement JAMF Connect in our organization. I was able to successfully configure the OIDC, but while testing the ROPG, I am getting the attached error. I have confirmed that the client secret ID is correct, as the ROPG login is working for just one account. Also, all the users have been given access to the Enterprise Application. Any leads would be helpful. Thanks

Hi, I have a scenario where I want to use Entra ID during Automated Enrollment to authenticate end users and ensure Entra ID is the single source of truth for users and groups. I was also wondering whether if it would be possible to automatically create local accounts based on Entra ID.From what I have read, this is only possible with Jamf Connect. However, I've also heard that Jamf Pro has some IdP/SSO capabilities during enrollment, I'm trying to understand what can actually be achieved using Jamf Pro alone. If anyone with Jamf Pro expertise could clarify, I would greatly appreciate it. Thanks!

I’m trying to figure out how to configure the passcode to be 6 digits instead of 8 characters, including uppercase and lowercase letters and numbers. 

Has anyone successfully managed the following Safari settings via Jamf Pro (macOS and iPadOS)?• Hide IP Address from Trackers  • Prevent Cross-Site Tracking (I have disabled this in Safari on Macs with the “WebKitPreferences.storageBlockingPolicy” key.We are trying to determine whether these can be enforced through a configuration profile or other supported method, rather than relying on per-user changes. This is for lab or classroom environments,If you’ve implemented this, could you share:- Whether it’s working on macOS, iPadOS, or both  - The payload/key used (if profile-based) or the approach taken  Thanks in advance for any insight!

Hey Jamf Nation,Your favourite time of year is just around the corner...the JNUC Call for Sessions! 📣This year, we’re doing something a little different for our Jamf Nation community. We’re bringing the inner workings of JNUC and the session selection process straight to you!Join us for a live session with two of our very own JNUC session team, where we’ll cover:• Tips and tricks for submitting a standout JNUC session• The 2026 subject themes• When the Call for Sessions officially opensWe’ll also hear from a community member and past JNUC presenter, who’ll share how their session idea came together and what they learned along the way. 🗓️ Date: Wednesday, February 25⏰Time: 9–10 a.m. CST / 10–11 a.m. EST / 8–9 a.m. MST / 7–8 a.m. PST / 3–4 p.m. GMT / 4–5 p.m. CET / 8:30–9:30 p.m. IST / 11 p.m.–12 a.m. SGT / 12–1 a.m. JST+1🚨 REGISTER HERE ➡️ https://jamf.it/JamfNationEvents Have a question for the team? Add it to the thread below!Don’t forget to register! See you soon! 

Hello there everyone, I have come across a very weird issue lately.Any policy that I add to Self Service+ fail to run, while if I open Terminal and run jamf policy -event TRIGGER it works like a charm.The policy does not matter it if includes a package or a script. It has been driving me nuts.Tried on different machines and re-installing Self Service+ app. Thank you in advance,Spyros

Hi everyone, we’re currently testing Platform SSO (Secure Enclave) in combination with the Kerberos Single Sign-On Extensionon our Macs (managed via Jamf Pro).Since enabling Platform SSO, we’ve encountered issues with password synchronization as well as Single Sign-On authentication for ADFS-based web applications. As soon as Platform SSO is enabled, users receive the following prompt either after some time or following a reboot:Password SynchronizationVerify your Active Directory and Mac passwords. If they do not match, your Mac password will be synced. The passwords are identical (local macOS login = AD password). However, this prompt appears repeatedly — and only when Platform SSO is active. Additionally, our ADFS-based web applications (intranet portals, internal sites) no longer perform automatic Single Sign-On once Platform SSO is active.I’ve tested this behavior in multiple browsers (Safari, Chrome, Edge, and Firefox), and in all cases, users are prompted to sign in manually.Whe

We have had a PolicyBanner installed on our fleet for several years.  We have not had an issue with it until users upgraded to 26.  When the banner pops after user login, the window is stretched to almost full screen, regardless of screen size or resolution.  Screenshot attached of my large screen monitor.I have tried editing the RTF file a few ways to change margins and it will change the text but does not affect how the window sizes.I have also tried changing Desktop & Dock > Windows to Prefer tabs to Always instead of Full Screen This screenshot shows after trying to change margin and text.  I can share another with all the txt centered and nothing on the right of the txt but empty white space.   Thoughts?  Here is the original screen  

Howdy everybody! Time for my annual post about how we all need to get our budgets prepped and ready to go for all the hardware we need to replace that Apple is dropping from its OS Compatibility list!I've modified my previous regex statement to take out the models that were lost to us this year to the latest macOS version. It looks like Apple is taking a big ole axe to the intel macs, minus only a couple of exceptions that seem to tie to the devices that were still being sold at the time of the M1 release. One tricky piece are the specific intel MacBook Pro's that Apple has listed. In that grouping are the MacBookPro16,x models, where x is 1,2 and 4, but not the 16,3 model, so keep that in mind. If anyone has details that contradict that, please let me know here and i'll quickly change the posted regex.I've tested this in my own Jamf instances to verify its returning the data that i'd expect to see, and am confident this will be able to match everything that is no longer supported by M

☀️ Hey All! Our Marketing team is putting together a short video for social media to recognize Apple's 50th Anniversary, and we'd love to include a few customers in the video. If you’d like to participate, take a look at this Vouch request link to get a better understanding of what’s needed:https://app.vouchfor.com/c/Of0SDkUYpd?senderId=3ZKGbIfEhK We can’t guarantee that all submissions will make it into the final video, but if yours is fun/unique in some way, you have a good shot. 🙂 Deadline to submit: Friday, Feb. 20 Thanks, as always, for being a part of the Jamf story!!!❤️ Jeni

Anyone running into an issue with the Shared Device SSOe profile failing to install on shared iOS devices? I set up the Intune integration with Jamf Pro for both shared devices and standard iOS devices. Standard iOS devices register with Microsoft just fine, but don’t actually perform SSO with the Microsoft apps but they do show as compliant in Entra. I had the Shared Devices registering for about two days and now after wipe, The “Install Device Compliance Shared Device Profile” command fails every time even with a different device. Previous Entra records have been removed. Any ideas of what I could try to fix it or where I can find more detailed logs? History of failed commands had nothing. 

Hey Nation,I’m normally not one to jump on a trend but this one was too fun not to! Who’s up for sharing theirs??Head to ChatGPT (I know it’s already open so shouldn’t take you long 😂) and ask: “Create a caricature of me and my job based on everything you know about me.”Here’s mine! Post yours in the thread 🧵! I can’t wait to see them all!!!

The criteria Postion in the User and Location for iPad users was removed. Not all user... Any ideas why?  I can’t find that anything was changed in Jamf. 

In macOS 15, the new Private MAC address settings is enabled by default, and there is a new settings in Profile to disable it, BUT it's only for a spacified SSID. If you need a global setting to disable the Private MAC for all existed and new SSID, try to create a new policy to run this command: sudo defaults write /Library/Preferences/SystemConfiguration/com.apple.airport.preferences.plist PrivateMACAddressModeSystemSetting -int 1 It will not disable the Private MAC Address immediately, but it will work after forgot the network or reboot the computer.  

as a systemadmin I really like the Mac Apps updates , both Jamf App catalog and App store. But as a user (and all our users) we get annoyed by the popups. The announcement popup I can understand, but the thank you popup after update is really not needed I think.Would be great if we can disable that.

We’re kicking off 2026 with an Arcade Happy Hour, and you won’t want to miss it. 🗓 Friday, February 20, 2026⏰ 6:00 PM – 8:00 PM📍 Game Terminal, 201 Terminal Ct, Nashville, TN 37210🎮 Sponsored by: Rippling IT Rippling IT will be our featured presenter and is hosting the night at one of Nashville’s best arcade bars. 🎁 Bonus: All attendees will be entered into a raffle for an Xbox Series S. Expect great conversations, good drinks, classic arcade games, and plenty of time to connect with fellow Apple and endpoint admins in the Nashville area. Whether you’re managing Macs full-time, supporting Apple devices on the side, or just getting started, this is a great chance to meet the local community. Mark your calendar now and spread the word. Hope to see you there!Arcade Meetup for Music City Mac Admins

When creating a smartgroup, there’s a criteria for Last Enrollment. But it’s based on the enrollment date, which does not always have a value. Those machines seem to be excluded from any search which uses the enrollment date criteria. How do you search for machines with no enrollment date?

Hello everyone,i wanted to roll out our new custom TeamViewer Host and everything works except that our custom design with the company logo is not displayed. I did it exactly as in the instructions: https://hcsonline.com/images/PDFs/Jamf_Teamviewer_Host.pdf After the custom logo didn't show up, I kept searching and came across these instructions: https://community.teamviewer.com/English/kb/articles/50739-mass-deployment-on-macos#perform-an-assignmentThe groups and the membership works but unfortunately our custom layout does not. Am I missing something or have I done something wrong?  

皆様こんにちは！先日ご案内いたしましたユーザ会ウェビナーの詳細です。今回はユーザ会の方々より年次更新についてお話いただきます。・森村学園 初等部　榎本 昇 先生　「年次更新・更新解除について」・瀬戸内高等学校　アンソニー ダグラス先生　「業者と連携してのKittingと配布方法」・株式会社 マジックハット　小林 暁 様　「年次更新と宣言型デバイス管理について」3月13日 午後7時より開始です。ご参加ご希望の方は maki.kogita@jamf.com までご連絡をお願い致します。素敵な週末をお過ごしください👋

🍎 SF Apple Admin User Group - February Meetup​Join us for an evening of Apple administration insights, networking, and community!​📅 Event Details​Date: Thursday, February 19, 2025Time: 5:30 PM - 7:30 PM PST​Location: Hej!Workshop with IndustriousConference 1-A • Floor 5945 Market StreetSan Francisco, CA 94103RSVP here ​🎤 Featured Speaker​Risotto - topic TBDAkash Kamath (SVP Product, Engineering & Cloud at Jamf) - Predicting The Future of Apple Device Management From The Engineer’s Point of ViewAron Solberg (Co-founder & CEO at Risotto) - Automating the IT Use Cases that Matter for 60%+ IT Autosolve rates​​🌐 Attendance Options (Please choose the appropriate ticket) ​In-Person: Limited to 40 attendees - secure your spot early! ​Virtual: Join via Zoom for remote networking. (Zoom info will be sent out prior to the event) ​🥂 Refreshments​Food and drinks provided - come ready to network over pizza and refreshments!​🏢 Venue Details​Hej!Workshop space in the heart of San Franc

Hello all,   I am struggling getting OneDrive to silently sign in and redirect folders.  I have researched previous posts, and am using Microsoft's guide here: https://learn.microsoft.com/en-us/sharepoint/deploy-and-configure-on-macos to no avail. Here is my configuration policy below -- can anyone take a look and see what I'm missing?  I swapped out my real tenant ID with (Tenant ID) for the sake of sharing.  Thanks for your help.   <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1"> <dict> <key>KFMBlockOptOut</key> <True/> <key>KFMSilentOptIn</key> <string>(Tenant ID)</string> <key>KFMSilentOptInWithNotification</key> <True/> <key>KFMOptInWithWizard</key> <string>(Tenant ID)</string> <key>EnableSyncAdminR

Originally posted in MacAdmin Musings Why I Try to Stop Working Before Everything Is Finished For a long time, I treated the end of my workday as a finish line.I’d keep going until the problem was solved, the task was complete, or I was too drained to continue. If something was still broken or unanswered, I felt pressure to push through it before logging off. Ending the day with loose ends felt like failure, like I wasn’t completing my tasks.Over time, I realized that approach was quietly working against me.Not because unfinished work is bad, but because how you leave work unfinished matters. The Hidden Cost of Draining the Tank When you work until you have nothing left, you don’t just end the day tired. You also make tomorrow harder.The next morning starts cold:You have to remember what you were thinking You have to reconstruct context You have to re-load mental state before you can make progressThat ramp-up cost is real, whether you’re writing small scripts or a large project. Moment

Thanks in advance for your input...Our current scenario: our newly purchased iOS/iPadOS devices are automatically enrolled into Jamf Pro and then go into a default group. This group has a relatively restrictive Configuration Profile that prevents users from adding an Apple Account. If the user needs a different configuration or apps on their device, they need to submit a form to the device management team. From there, the device mgmt team works with the user and so on. Since we’re in education, we’re dealing with a full gamut of needs, business apps, engineering, utility/infrastructure, scientific, entertainment, media, development...you get the idea. So, we can’t anticipate ALL of the apps users want beforehand.Questions: what is your organization's workflow for newly purchased iOS/iPadOS devices? And how do you communicate to end-users where to go for additional support/apps/configs when they power on their new device?We're thinking either a wallpaper with messaging about reaching ou